McAfee QUICKCLEAN 1.0 Manual de usuario Pagina 18

  • Descarga
  • Añadir a mis manuales
  • Imprimir
  • Pagina
    / 29
  • Tabla de contenidos
  • MARCADORES
  • Valorado. / 5. Basado en revisión del cliente
Vista de pagina 17
4
Select items in the list and use the Actions menu to set reputation override settings. The files or
certificates are then added to the overrides list.
You can add a note about the change, for example, Researched the file's reputation.
Blocking this file.
5
To verify the change, click the File Overrides or Certificate Overrides tab to see that the file or certificate is
listed with its updated reputation.
Import reputations
Import existing file or certificate reputation information to the Threat Intelligence Exchange database.
Task
For option definitions, click ? in the interface.
1
Click Menu | Systems | TIE Reputations.
2
Click the File Overrides or Certificate Overrides tab.
3
From the Actions menu, click Import Reputations.
4
In the Import Reputations dialog box, specify whether to import an XML file with one or more
reputations, or a single reputation.
Select the reputation XML file to import — Browse to the file location. See the following topic about the
XML import file requirements.
Import single reputation — Enter the information for the file.
Requirements for importing an XML file
When importing reputation information in an XML file, the file must meet these requirements.
Specifying the reputation as a number
You must specify the file or certificate reputation as a numerical value in the XML file.
Reputation setting Numerical value
Known trusted 99
Most likely trusted 85
Might be trusted 70
Unknown 50
Might be malicious 30
Most likely malicious 15
Known malicious 1
Not set 0
File reputations
For each file, include its SHA-1 Hash and MD5 numbers. The file name is optional, but including it
helps identify it in reports.
Certificate reputations
For each certificate, include its SHA-1 Hash and Public Key SHA-1 numbers. The certificate name is
optional, but including it helps identify it in reports.
2
Using Threat Intelligence Exchange
Changing default threat reputations
18
McAfee Threat Intelligence Exchange 1.0.0 Product Guide
Vista de pagina 17
1 2 ... 13 14 15 16 17 18 19 20 21 22 23 ... 28 29

Comentarios a estos manuales

Sin comentarios